Senior Vendor & Contract Mgr

Senior Vendor & Contract Mgr

Location: Trenton. NJ (Hybrid)

Duration: 12 Months

Interview Type: Inperson Interview

Short Description:

• Senior Vendor & Audit Contract Manager reporting to the CIO to lead third-party -party risk IT audit readiness remediation and policy lifecycle management aligning public sector systems with NIST SOC and enterprise IT security baselines.
• Complete Description:
• Note: This is a hybrid position - 3 days on-site and 2 days remote.
• We are seeking a Senior Vendor & Contract Manager reporting directly to the Chief Information Officer (CIO) to lead enterprise-wide vendor compliance third-party governance IT audit readiness and policy lifecycle management across our technology ecosystem.

Key Responsibilities:

• Lead Third-Party Risk Management (TPRM) establishing vendor vetting risk scoring and continuous compliance oversight across cloud providers software vendors and system integrators.
• Oversee IT audit readiness and execution evaluating vendor SOC 1/SOC 2 Type II reports ISO certifications and independent third-party control attestations.
• Manage finding remediation lifecycles driving technical root-cause analyses with IT teams and verifying artifact evidence to close internal and external audit deficiencies.
• Author update and maintain all public-facing and internal IT security privacy and technology governance policies standards and standard operating procedures (SOPs) to ensure continuous alignment with NIST state and federal mandates.
• Enforce IT General Controls (ITGC) access governance and data protection baselines across internal platforms and external vendor environments.
• Collaborate with Legal and Procurement to review and enforce compliance exhibits Data Processing/Sharing Agreements SLAs and right-to-audit clauses.
• Advise the CIO directly on enterprise compliance posture delivering executive risk scorecards audit tracking dashboards and mitigation strategies.

Qualifications:

• 8 years of IT compliance third-party risk management (TPRM) and audit governance experience within large-scale enterprise environments.
• Proven track record authoring and operationalizing enterprise IT security governance and data compliance policies.
• Deep technical familiarity evaluating SOC 1/SOC 2 Type II reports ITGCs and NIST/ISO control frameworks.
• Strong background presenting risk metrics compliance status and audit readouts directly to executive leadership.

Required / Desired Skills

• IT Compliance ITGC & Audit Governance in Enterprise Environments Required 8 Years
• Authoring & Updating Enterprise IT Security Governance & Regulatory Policies Required 7 Years
• Audit Finding Remediation Technical Root-Cause Analysis & Action Plans Required 7 Years
• Alignment with NIST (SP 800-53 / CSF) and ISO 27001 Security Frameworks Required 7 Years
• Third-Party Risk Management (TPRM) & Cloud/SaaS Vendor Qualification Highly desired 7 Years
• Evaluating SOC 1 / SOC 2 Type II Reports & Independent Security Attestations Highly desired 7 Years
• Bachelors Degree minimum Required

Required Skills:

IT Compliance ITGC & Audit GovernanceISO 27001 Security FrameworksNIST (SP 800-53 / CSF)Third-Party Risk Management (TPRM)Cloud/SaaSSOC 1 / SOC 2